Privilege Escalation in Controlled Admin Access Plugin for WordPress

CVE-2021-4360

What is CVE-2021-4360?

The Controlled Admin Access plugin for WordPress prior to version 1.5.5 allows attackers to escalate privileges by improperly restricting access to the configuration page. This vulnerability permits the creation of a new administrator role with full control, exposing the site to various security risks. It highlights the importance of regular updates and vigilant monitoring to mitigate potential exploitation.

References